2 # Generic algorithms support
8 # async_tx api: hardware offloaded memory transfer/transform support
10 source "crypto/async_tx/Kconfig"
13 # Cryptographic API Configuration
16 tristate "Cryptographic API"
18 This option provides the core Cryptographic API.
22 comment "Crypto core or helper"
25 bool "FIPS 200 compliance"
26 depends on (CRYPTO_ANSI_CPRNG || CRYPTO_DRBG) && !CRYPTO_MANAGER_DISABLE_TESTS
29 This options enables the fips boot option which is
30 required if you want to system to operate in a FIPS 200
31 certification. You should say no unless you know what
38 This option provides the API for cryptographic algorithms.
52 config CRYPTO_BLKCIPHER
54 select CRYPTO_BLKCIPHER2
57 config CRYPTO_BLKCIPHER2
61 select CRYPTO_WORKQUEUE
91 tristate "Cryptographic algorithm manager"
92 select CRYPTO_MANAGER2
94 Create default cryptographic template instantiations such as
97 config CRYPTO_MANAGER2
98 def_tristate CRYPTO_MANAGER || (CRYPTO_MANAGER!=n && CRYPTO_ALGAPI=y)
101 select CRYPTO_BLKCIPHER2
105 tristate "Userspace cryptographic algorithm configuration"
107 select CRYPTO_MANAGER
109 Userspace configuration for cryptographic instantiations such as
112 config CRYPTO_MANAGER_DISABLE_TESTS
113 bool "Disable run-time self tests"
115 depends on CRYPTO_MANAGER2
117 Disable run-time self tests that normally take place at
118 algorithm registration.
120 config CRYPTO_GF128MUL
121 tristate "GF(2^128) multiplication functions"
123 Efficient table driven implementation of multiplications in the
124 field GF(2^128). This is needed by some cypher modes. This
125 option will be selected automatically if you select such a
126 cipher mode. Only select this option by hand if you expect to load
127 an external module that requires these functions.
130 tristate "Null algorithms"
132 select CRYPTO_BLKCIPHER
135 These are 'Null' algorithms, used by IPsec, which do nothing.
138 tristate "Parallel crypto engine"
141 select CRYPTO_MANAGER
144 This converts an arbitrary crypto algorithm into a parallel
145 algorithm that executes in kernel threads.
147 config CRYPTO_WORKQUEUE
151 tristate "Software async crypto daemon"
152 select CRYPTO_BLKCIPHER
154 select CRYPTO_MANAGER
155 select CRYPTO_WORKQUEUE
157 This is a generic software asynchronous crypto daemon that
158 converts an arbitrary synchronous software crypto algorithm
159 into an asynchronous algorithm that executes in a kernel thread.
161 config CRYPTO_AUTHENC
162 tristate "Authenc support"
164 select CRYPTO_BLKCIPHER
165 select CRYPTO_MANAGER
168 Authenc: Combined mode wrapper for IPsec.
169 This is required for IPSec.
172 tristate "Testing module"
174 select CRYPTO_MANAGER
176 Quick & dirty crypto test module.
178 config CRYPTO_ABLK_HELPER
182 config CRYPTO_GLUE_HELPER_X86
187 comment "Authenticated Encryption with Associated Data"
190 tristate "CCM support"
194 Support for Counter with CBC MAC. Required for IPsec.
197 tristate "GCM/GMAC support"
203 Support for Galois/Counter Mode (GCM) and Galois Message
204 Authentication Code (GMAC). Required for IPSec.
207 tristate "Sequence Number IV Generator"
209 select CRYPTO_BLKCIPHER
212 This IV generator generates an IV based on a sequence number by
213 xoring it with a salt. This algorithm is mainly useful for CTR
215 comment "Block modes"
218 tristate "CBC support"
219 select CRYPTO_BLKCIPHER
220 select CRYPTO_MANAGER
222 CBC: Cipher Block Chaining mode
223 This block cipher algorithm is required for IPSec.
226 tristate "CTR support"
227 select CRYPTO_BLKCIPHER
229 select CRYPTO_MANAGER
232 This block cipher algorithm is required for IPSec.
235 tristate "CTS support"
236 select CRYPTO_BLKCIPHER
238 CTS: Cipher Text Stealing
239 This is the Cipher Text Stealing mode as described by
240 Section 8 of rfc2040 and referenced by rfc3962.
241 (rfc3962 includes errata information in its Appendix A)
242 This mode is required for Kerberos gss mechanism support
246 tristate "ECB support"
247 select CRYPTO_BLKCIPHER
248 select CRYPTO_MANAGER
250 ECB: Electronic CodeBook mode
251 This is the simplest block cipher algorithm. It simply encrypts
252 the input block by block.
255 tristate "LRW support"
256 select CRYPTO_BLKCIPHER
257 select CRYPTO_MANAGER
258 select CRYPTO_GF128MUL
260 LRW: Liskov Rivest Wagner, a tweakable, non malleable, non movable
261 narrow block cipher mode for dm-crypt. Use it with cipher
262 specification string aes-lrw-benbi, the key must be 256, 320 or 384.
263 The first 128, 192 or 256 bits in the key are used for AES and the
264 rest is used to tie each cipher block to its logical position.
267 tristate "PCBC support"
268 select CRYPTO_BLKCIPHER
269 select CRYPTO_MANAGER
271 PCBC: Propagating Cipher Block Chaining mode
272 This block cipher algorithm is required for RxRPC.
275 tristate "XTS support"
276 select CRYPTO_BLKCIPHER
277 select CRYPTO_MANAGER
278 select CRYPTO_GF128MUL
280 XTS: IEEE1619/D16 narrow block cipher use with aes-xts-plain,
281 key size 256, 384 or 512 bits. This implementation currently
282 can't handle a sectorsize which is not a multiple of 16 bytes.
287 tristate "CMAC support"
289 select CRYPTO_MANAGER
291 Cipher-based Message Authentication Code (CMAC) specified by
292 The National Institute of Standards and Technology (NIST).
294 https://tools.ietf.org/html/rfc4493
295 http://csrc.nist.gov/publications/nistpubs/800-38B/SP_800-38B.pdf
298 tristate "HMAC support"
300 select CRYPTO_MANAGER
302 HMAC: Keyed-Hashing for Message Authentication (RFC2104).
303 This is required for IPSec.
306 tristate "XCBC support"
308 select CRYPTO_MANAGER
310 XCBC: Keyed-Hashing with encryption algorithm
311 http://www.ietf.org/rfc/rfc3566.txt
312 http://csrc.nist.gov/encryption/modes/proposedmodes/
313 xcbc-mac/xcbc-mac-spec.pdf
316 tristate "VMAC support"
318 select CRYPTO_MANAGER
320 VMAC is a message authentication algorithm designed for
321 very high speed on 64-bit architectures.
324 <http://fastcrypto.org/vmac>
329 tristate "CRC32c CRC algorithm"
333 Castagnoli, et al Cyclic Redundancy-Check Algorithm. Used
334 by iSCSI for header and data digests and by others.
335 See Castagnoli93. Module will be crc32c.
337 config CRYPTO_CRC32C_INTEL
338 tristate "CRC32c INTEL hardware acceleration"
342 In Intel processor with SSE4.2 supported, the processor will
343 support CRC32C implementation using hardware accelerated CRC32
344 instruction. This option will create 'crc32c-intel' module,
345 which will enable any routine to use the CRC32 instruction to
346 gain performance compared with software implementation.
347 Module will be crc32c-intel.
349 config CRYPTO_CRC32C_SPARC64
350 tristate "CRC32c CRC algorithm (SPARC64)"
355 CRC32c CRC algorithm implemented using sparc64 crypto instructions,
359 tristate "CRC32 CRC algorithm"
363 CRC-32-IEEE 802.3 cyclic redundancy-check algorithm.
364 Shash crypto api wrappers to crc32_le function.
366 config CRYPTO_CRC32_PCLMUL
367 tristate "CRC32 PCLMULQDQ hardware acceleration"
372 From Intel Westmere and AMD Bulldozer processor with SSE4.2
373 and PCLMULQDQ supported, the processor will support
374 CRC32 PCLMULQDQ implementation using hardware accelerated PCLMULQDQ
375 instruction. This option will create 'crc32-plcmul' module,
376 which will enable any routine to use the CRC-32-IEEE 802.3 checksum
377 and gain better performance as compared with the table implementation.
379 config CRYPTO_CRCT10DIF
380 tristate "CRCT10DIF algorithm"
383 CRC T10 Data Integrity Field computation is being cast as
384 a crypto transform. This allows for faster crc t10 diff
385 transforms to be used if they are available.
387 config CRYPTO_CRCT10DIF_PCLMUL
388 tristate "CRCT10DIF PCLMULQDQ hardware acceleration"
389 depends on X86 && 64BIT && CRC_T10DIF
392 For x86_64 processors with SSE4.2 and PCLMULQDQ supported,
393 CRC T10 DIF PCLMULQDQ computation can be hardware
394 accelerated PCLMULQDQ instruction. This option will create
395 'crct10dif-plcmul' module, which is faster when computing the
396 crct10dif checksum as compared with the generic table implementation.
399 tristate "GHASH digest algorithm"
400 select CRYPTO_GF128MUL
402 GHASH is message digest algorithm for GCM (Galois/Counter Mode).
405 tristate "MD4 digest algorithm"
408 MD4 message digest algorithm (RFC1320).
411 tristate "MD5 digest algorithm"
414 MD5 message digest algorithm (RFC1321).
416 config CRYPTO_MD5_SPARC64
417 tristate "MD5 digest algorithm (SPARC64)"
422 MD5 message digest algorithm (RFC1321) implemented
423 using sparc64 crypto instructions, when available.
425 config CRYPTO_MICHAEL_MIC
426 tristate "Michael MIC keyed digest algorithm"
429 Michael MIC is used for message integrity protection in TKIP
430 (IEEE 802.11i). This algorithm is required for TKIP, but it
431 should not be used for other purposes because of the weakness
435 tristate "RIPEMD-128 digest algorithm"
438 RIPEMD-128 (ISO/IEC 10118-3:2004).
440 RIPEMD-128 is a 128-bit cryptographic hash function. It should only
441 be used as a secure replacement for RIPEMD. For other use cases,
442 RIPEMD-160 should be used.
444 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
445 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
448 tristate "RIPEMD-160 digest algorithm"
451 RIPEMD-160 (ISO/IEC 10118-3:2004).
453 RIPEMD-160 is a 160-bit cryptographic hash function. It is intended
454 to be used as a secure replacement for the 128-bit hash functions
455 MD4, MD5 and it's predecessor RIPEMD
456 (not to be confused with RIPEMD-128).
458 It's speed is comparable to SHA1 and there are no known attacks
461 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
462 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
465 tristate "RIPEMD-256 digest algorithm"
468 RIPEMD-256 is an optional extension of RIPEMD-128 with a
469 256 bit hash. It is intended for applications that require
470 longer hash-results, without needing a larger security level
473 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
474 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
477 tristate "RIPEMD-320 digest algorithm"
480 RIPEMD-320 is an optional extension of RIPEMD-160 with a
481 320 bit hash. It is intended for applications that require
482 longer hash-results, without needing a larger security level
485 Developed by Hans Dobbertin, Antoon Bosselaers and Bart Preneel.
486 See <http://homes.esat.kuleuven.be/~bosselae/ripemd160.html>
489 tristate "SHA1 digest algorithm"
492 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
494 config CRYPTO_SHA1_SSSE3
495 tristate "SHA1 digest algorithm (SSSE3/AVX/AVX2)"
496 depends on X86 && 64BIT
500 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
501 using Supplemental SSE3 (SSSE3) instructions or Advanced Vector
502 Extensions (AVX/AVX2), when available.
504 config CRYPTO_SHA256_SSSE3
505 tristate "SHA256 digest algorithm (SSSE3/AVX/AVX2)"
506 depends on X86 && 64BIT
510 SHA-256 secure hash standard (DFIPS 180-2) implemented
511 using Supplemental SSE3 (SSSE3) instructions, or Advanced Vector
512 Extensions version 1 (AVX1), or Advanced Vector Extensions
513 version 2 (AVX2) instructions, when available.
515 config CRYPTO_SHA512_SSSE3
516 tristate "SHA512 digest algorithm (SSSE3/AVX/AVX2)"
517 depends on X86 && 64BIT
521 SHA-512 secure hash standard (DFIPS 180-2) implemented
522 using Supplemental SSE3 (SSSE3) instructions, or Advanced Vector
523 Extensions version 1 (AVX1), or Advanced Vector Extensions
524 version 2 (AVX2) instructions, when available.
526 config CRYPTO_SHA1_SPARC64
527 tristate "SHA1 digest algorithm (SPARC64)"
532 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
533 using sparc64 crypto instructions, when available.
535 config CRYPTO_SHA1_ARM
536 tristate "SHA1 digest algorithm (ARM-asm)"
541 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2) implemented
542 using optimized ARM assembler.
544 config CRYPTO_SHA1_PPC
545 tristate "SHA1 digest algorithm (powerpc)"
548 This is the powerpc hardware accelerated implementation of the
549 SHA-1 secure hash standard (FIPS 180-1/DFIPS 180-2).
552 tristate "SHA224 and SHA256 digest algorithm"
555 SHA256 secure hash standard (DFIPS 180-2).
557 This version of SHA implements a 256 bit hash with 128 bits of
558 security against collision attacks.
560 This code also includes SHA-224, a 224 bit hash with 112 bits
561 of security against collision attacks.
563 config CRYPTO_SHA256_SPARC64
564 tristate "SHA224 and SHA256 digest algorithm (SPARC64)"
569 SHA-256 secure hash standard (DFIPS 180-2) implemented
570 using sparc64 crypto instructions, when available.
573 tristate "SHA384 and SHA512 digest algorithms"
576 SHA512 secure hash standard (DFIPS 180-2).
578 This version of SHA implements a 512 bit hash with 256 bits of
579 security against collision attacks.
581 This code also includes SHA-384, a 384 bit hash with 192 bits
582 of security against collision attacks.
584 config CRYPTO_SHA512_SPARC64
585 tristate "SHA384 and SHA512 digest algorithm (SPARC64)"
590 SHA-512 secure hash standard (DFIPS 180-2) implemented
591 using sparc64 crypto instructions, when available.
594 tristate "Tiger digest algorithms"
597 Tiger hash algorithm 192, 160 and 128-bit hashes
599 Tiger is a hash function optimized for 64-bit processors while
600 still having decent performance on 32-bit processors.
601 Tiger was developed by Ross Anderson and Eli Biham.
604 <http://www.cs.technion.ac.il/~biham/Reports/Tiger/>.
607 tristate "Whirlpool digest algorithms"
610 Whirlpool hash algorithm 512, 384 and 256-bit hashes
612 Whirlpool-512 is part of the NESSIE cryptographic primitives.
613 Whirlpool will be part of the ISO/IEC 10118-3:2003(E) standard
616 <http://www.larc.usp.br/~pbarreto/WhirlpoolPage.html>
618 config CRYPTO_GHASH_CLMUL_NI_INTEL
619 tristate "GHASH digest algorithm (CLMUL-NI accelerated)"
620 depends on X86 && 64BIT
623 GHASH is message digest algorithm for GCM (Galois/Counter Mode).
624 The implementation is accelerated by CLMUL-NI of Intel.
629 tristate "AES cipher algorithms"
632 AES cipher algorithms (FIPS-197). AES uses the Rijndael
635 Rijndael appears to be consistently a very good performer in
636 both hardware and software across a wide range of computing
637 environments regardless of its use in feedback or non-feedback
638 modes. Its key setup time is excellent, and its key agility is
639 good. Rijndael's very low memory requirements make it very well
640 suited for restricted-space environments, in which it also
641 demonstrates excellent performance. Rijndael's operations are
642 among the easiest to defend against power and timing attacks.
644 The AES specifies three key sizes: 128, 192 and 256 bits
646 See <http://csrc.nist.gov/CryptoToolkit/aes/> for more information.
648 config CRYPTO_AES_586
649 tristate "AES cipher algorithms (i586)"
650 depends on (X86 || UML_X86) && !64BIT
654 AES cipher algorithms (FIPS-197). AES uses the Rijndael
657 Rijndael appears to be consistently a very good performer in
658 both hardware and software across a wide range of computing
659 environments regardless of its use in feedback or non-feedback
660 modes. Its key setup time is excellent, and its key agility is
661 good. Rijndael's very low memory requirements make it very well
662 suited for restricted-space environments, in which it also
663 demonstrates excellent performance. Rijndael's operations are
664 among the easiest to defend against power and timing attacks.
666 The AES specifies three key sizes: 128, 192 and 256 bits
668 See <http://csrc.nist.gov/encryption/aes/> for more information.
670 config CRYPTO_AES_X86_64
671 tristate "AES cipher algorithms (x86_64)"
672 depends on (X86 || UML_X86) && 64BIT
676 AES cipher algorithms (FIPS-197). AES uses the Rijndael
679 Rijndael appears to be consistently a very good performer in
680 both hardware and software across a wide range of computing
681 environments regardless of its use in feedback or non-feedback
682 modes. Its key setup time is excellent, and its key agility is
683 good. Rijndael's very low memory requirements make it very well
684 suited for restricted-space environments, in which it also
685 demonstrates excellent performance. Rijndael's operations are
686 among the easiest to defend against power and timing attacks.
688 The AES specifies three key sizes: 128, 192 and 256 bits
690 See <http://csrc.nist.gov/encryption/aes/> for more information.
692 config CRYPTO_AES_NI_INTEL
693 tristate "AES cipher algorithms (AES-NI)"
695 select CRYPTO_AES_X86_64 if 64BIT
696 select CRYPTO_AES_586 if !64BIT
698 select CRYPTO_ABLK_HELPER
700 select CRYPTO_GLUE_HELPER_X86 if 64BIT
704 Use Intel AES-NI instructions for AES algorithm.
706 AES cipher algorithms (FIPS-197). AES uses the Rijndael
709 Rijndael appears to be consistently a very good performer in
710 both hardware and software across a wide range of computing
711 environments regardless of its use in feedback or non-feedback
712 modes. Its key setup time is excellent, and its key agility is
713 good. Rijndael's very low memory requirements make it very well
714 suited for restricted-space environments, in which it also
715 demonstrates excellent performance. Rijndael's operations are
716 among the easiest to defend against power and timing attacks.
718 The AES specifies three key sizes: 128, 192 and 256 bits
720 See <http://csrc.nist.gov/encryption/aes/> for more information.
722 In addition to AES cipher algorithm support, the acceleration
723 for some popular block cipher mode is supported too, including
724 ECB, CBC, LRW, PCBC, XTS. The 64 bit version has additional
725 acceleration for CTR.
727 config CRYPTO_AES_SPARC64
728 tristate "AES cipher algorithms (SPARC64)"
733 Use SPARC64 crypto opcodes for AES algorithm.
735 AES cipher algorithms (FIPS-197). AES uses the Rijndael
738 Rijndael appears to be consistently a very good performer in
739 both hardware and software across a wide range of computing
740 environments regardless of its use in feedback or non-feedback
741 modes. Its key setup time is excellent, and its key agility is
742 good. Rijndael's very low memory requirements make it very well
743 suited for restricted-space environments, in which it also
744 demonstrates excellent performance. Rijndael's operations are
745 among the easiest to defend against power and timing attacks.
747 The AES specifies three key sizes: 128, 192 and 256 bits
749 See <http://csrc.nist.gov/encryption/aes/> for more information.
751 In addition to AES cipher algorithm support, the acceleration
752 for some popular block cipher mode is supported too, including
755 config CRYPTO_AES_ARM
756 tristate "AES cipher algorithms (ARM-asm)"
761 Use optimized AES assembler routines for ARM platforms.
763 AES cipher algorithms (FIPS-197). AES uses the Rijndael
766 Rijndael appears to be consistently a very good performer in
767 both hardware and software across a wide range of computing
768 environments regardless of its use in feedback or non-feedback
769 modes. Its key setup time is excellent, and its key agility is
770 good. Rijndael's very low memory requirements make it very well
771 suited for restricted-space environments, in which it also
772 demonstrates excellent performance. Rijndael's operations are
773 among the easiest to defend against power and timing attacks.
775 The AES specifies three key sizes: 128, 192 and 256 bits
777 See <http://csrc.nist.gov/encryption/aes/> for more information.
779 config CRYPTO_AES_ARM_BS
780 tristate "Bit sliced AES using NEON instructions"
781 depends on ARM && KERNEL_MODE_NEON
783 select CRYPTO_AES_ARM
784 select CRYPTO_ABLK_HELPER
786 Use a faster and more secure NEON based implementation of AES in CBC,
789 Bit sliced AES gives around 45% speedup on Cortex-A15 for CTR mode
790 and for XTS mode encryption, CBC and XTS mode decryption speedup is
791 around 25%. (CBC encryption speed is not affected by this driver.)
792 This implementation does not rely on any lookup tables so it is
793 believed to be invulnerable to cache timing attacks.
796 tristate "Anubis cipher algorithm"
799 Anubis cipher algorithm.
801 Anubis is a variable key length cipher which can use keys from
802 128 bits to 320 bits in length. It was evaluated as a entrant
803 in the NESSIE competition.
806 <https://www.cosic.esat.kuleuven.be/nessie/reports/>
807 <http://www.larc.usp.br/~pbarreto/AnubisPage.html>
810 tristate "ARC4 cipher algorithm"
811 select CRYPTO_BLKCIPHER
813 ARC4 cipher algorithm.
815 ARC4 is a stream cipher using keys ranging from 8 bits to 2048
816 bits in length. This algorithm is required for driver-based
817 WEP, but it should not be for other purposes because of the
818 weakness of the algorithm.
820 config CRYPTO_BLOWFISH
821 tristate "Blowfish cipher algorithm"
823 select CRYPTO_BLOWFISH_COMMON
825 Blowfish cipher algorithm, by Bruce Schneier.
827 This is a variable key length cipher which can use keys from 32
828 bits to 448 bits in length. It's fast, simple and specifically
829 designed for use on "large microprocessors".
832 <http://www.schneier.com/blowfish.html>
834 config CRYPTO_BLOWFISH_COMMON
837 Common parts of the Blowfish cipher algorithm shared by the
838 generic c and the assembler implementations.
841 <http://www.schneier.com/blowfish.html>
843 config CRYPTO_BLOWFISH_X86_64
844 tristate "Blowfish cipher algorithm (x86_64)"
845 depends on X86 && 64BIT
847 select CRYPTO_BLOWFISH_COMMON
849 Blowfish cipher algorithm (x86_64), by Bruce Schneier.
851 This is a variable key length cipher which can use keys from 32
852 bits to 448 bits in length. It's fast, simple and specifically
853 designed for use on "large microprocessors".
856 <http://www.schneier.com/blowfish.html>
858 config CRYPTO_CAMELLIA
859 tristate "Camellia cipher algorithms"
863 Camellia cipher algorithms module.
865 Camellia is a symmetric key block cipher developed jointly
866 at NTT and Mitsubishi Electric Corporation.
868 The Camellia specifies three key sizes: 128, 192 and 256 bits.
871 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
873 config CRYPTO_CAMELLIA_X86_64
874 tristate "Camellia cipher algorithm (x86_64)"
875 depends on X86 && 64BIT
878 select CRYPTO_GLUE_HELPER_X86
882 Camellia cipher algorithm module (x86_64).
884 Camellia is a symmetric key block cipher developed jointly
885 at NTT and Mitsubishi Electric Corporation.
887 The Camellia specifies three key sizes: 128, 192 and 256 bits.
890 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
892 config CRYPTO_CAMELLIA_AESNI_AVX_X86_64
893 tristate "Camellia cipher algorithm (x86_64/AES-NI/AVX)"
894 depends on X86 && 64BIT
898 select CRYPTO_ABLK_HELPER
899 select CRYPTO_GLUE_HELPER_X86
900 select CRYPTO_CAMELLIA_X86_64
904 Camellia cipher algorithm module (x86_64/AES-NI/AVX).
906 Camellia is a symmetric key block cipher developed jointly
907 at NTT and Mitsubishi Electric Corporation.
909 The Camellia specifies three key sizes: 128, 192 and 256 bits.
912 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
914 config CRYPTO_CAMELLIA_AESNI_AVX2_X86_64
915 tristate "Camellia cipher algorithm (x86_64/AES-NI/AVX2)"
916 depends on X86 && 64BIT
920 select CRYPTO_ABLK_HELPER
921 select CRYPTO_GLUE_HELPER_X86
922 select CRYPTO_CAMELLIA_X86_64
923 select CRYPTO_CAMELLIA_AESNI_AVX_X86_64
927 Camellia cipher algorithm module (x86_64/AES-NI/AVX2).
929 Camellia is a symmetric key block cipher developed jointly
930 at NTT and Mitsubishi Electric Corporation.
932 The Camellia specifies three key sizes: 128, 192 and 256 bits.
935 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
937 config CRYPTO_CAMELLIA_SPARC64
938 tristate "Camellia cipher algorithm (SPARC64)"
943 Camellia cipher algorithm module (SPARC64).
945 Camellia is a symmetric key block cipher developed jointly
946 at NTT and Mitsubishi Electric Corporation.
948 The Camellia specifies three key sizes: 128, 192 and 256 bits.
951 <https://info.isl.ntt.co.jp/crypt/eng/camellia/index_s.html>
953 config CRYPTO_CAST_COMMON
956 Common parts of the CAST cipher algorithms shared by the
957 generic c and the assembler implementations.
960 tristate "CAST5 (CAST-128) cipher algorithm"
962 select CRYPTO_CAST_COMMON
964 The CAST5 encryption algorithm (synonymous with CAST-128) is
965 described in RFC2144.
967 config CRYPTO_CAST5_AVX_X86_64
968 tristate "CAST5 (CAST-128) cipher algorithm (x86_64/AVX)"
969 depends on X86 && 64BIT
972 select CRYPTO_ABLK_HELPER
973 select CRYPTO_CAST_COMMON
976 The CAST5 encryption algorithm (synonymous with CAST-128) is
977 described in RFC2144.
979 This module provides the Cast5 cipher algorithm that processes
980 sixteen blocks parallel using the AVX instruction set.
983 tristate "CAST6 (CAST-256) cipher algorithm"
985 select CRYPTO_CAST_COMMON
987 The CAST6 encryption algorithm (synonymous with CAST-256) is
988 described in RFC2612.
990 config CRYPTO_CAST6_AVX_X86_64
991 tristate "CAST6 (CAST-256) cipher algorithm (x86_64/AVX)"
992 depends on X86 && 64BIT
995 select CRYPTO_ABLK_HELPER
996 select CRYPTO_GLUE_HELPER_X86
997 select CRYPTO_CAST_COMMON
1002 The CAST6 encryption algorithm (synonymous with CAST-256) is
1003 described in RFC2612.
1005 This module provides the Cast6 cipher algorithm that processes
1006 eight blocks parallel using the AVX instruction set.
1009 tristate "DES and Triple DES EDE cipher algorithms"
1010 select CRYPTO_ALGAPI
1012 DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3).
1014 config CRYPTO_DES_SPARC64
1015 tristate "DES and Triple DES EDE cipher algorithms (SPARC64)"
1017 select CRYPTO_ALGAPI
1020 DES cipher algorithm (FIPS 46-2), and Triple DES EDE (FIPS 46-3),
1021 optimized using SPARC64 crypto opcodes.
1023 config CRYPTO_DES3_EDE_X86_64
1024 tristate "Triple DES EDE cipher algorithm (x86-64)"
1025 depends on X86 && 64BIT
1026 select CRYPTO_ALGAPI
1029 Triple DES EDE (FIPS 46-3) algorithm.
1031 This module provides implementation of the Triple DES EDE cipher
1032 algorithm that is optimized for x86-64 processors. Two versions of
1033 algorithm are provided; regular processing one input block and
1034 one that processes three blocks parallel.
1036 config CRYPTO_FCRYPT
1037 tristate "FCrypt cipher algorithm"
1038 select CRYPTO_ALGAPI
1039 select CRYPTO_BLKCIPHER
1041 FCrypt algorithm used by RxRPC.
1043 config CRYPTO_KHAZAD
1044 tristate "Khazad cipher algorithm"
1045 select CRYPTO_ALGAPI
1047 Khazad cipher algorithm.
1049 Khazad was a finalist in the initial NESSIE competition. It is
1050 an algorithm optimized for 64-bit processors with good performance
1051 on 32-bit processors. Khazad uses an 128 bit key size.
1054 <http://www.larc.usp.br/~pbarreto/KhazadPage.html>
1056 config CRYPTO_SALSA20
1057 tristate "Salsa20 stream cipher algorithm"
1058 select CRYPTO_BLKCIPHER
1060 Salsa20 stream cipher algorithm.
1062 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
1063 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
1065 The Salsa20 stream cipher algorithm is designed by Daniel J.
1066 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
1068 config CRYPTO_SALSA20_586
1069 tristate "Salsa20 stream cipher algorithm (i586)"
1070 depends on (X86 || UML_X86) && !64BIT
1071 select CRYPTO_BLKCIPHER
1073 Salsa20 stream cipher algorithm.
1075 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
1076 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
1078 The Salsa20 stream cipher algorithm is designed by Daniel J.
1079 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
1081 config CRYPTO_SALSA20_X86_64
1082 tristate "Salsa20 stream cipher algorithm (x86_64)"
1083 depends on (X86 || UML_X86) && 64BIT
1084 select CRYPTO_BLKCIPHER
1086 Salsa20 stream cipher algorithm.
1088 Salsa20 is a stream cipher submitted to eSTREAM, the ECRYPT
1089 Stream Cipher Project. See <http://www.ecrypt.eu.org/stream/>
1091 The Salsa20 stream cipher algorithm is designed by Daniel J.
1092 Bernstein <djb@cr.yp.to>. See <http://cr.yp.to/snuffle.html>
1095 tristate "SEED cipher algorithm"
1096 select CRYPTO_ALGAPI
1098 SEED cipher algorithm (RFC4269).
1100 SEED is a 128-bit symmetric key block cipher that has been
1101 developed by KISA (Korea Information Security Agency) as a
1102 national standard encryption algorithm of the Republic of Korea.
1103 It is a 16 round block cipher with the key size of 128 bit.
1106 <http://www.kisa.or.kr/kisa/seed/jsp/seed_eng.jsp>
1108 config CRYPTO_SERPENT
1109 tristate "Serpent cipher algorithm"
1110 select CRYPTO_ALGAPI
1112 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1114 Keys are allowed to be from 0 to 256 bits in length, in steps
1115 of 8 bits. Also includes the 'Tnepres' algorithm, a reversed
1116 variant of Serpent for compatibility with old kerneli.org code.
1119 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1121 config CRYPTO_SERPENT_SSE2_X86_64
1122 tristate "Serpent cipher algorithm (x86_64/SSE2)"
1123 depends on X86 && 64BIT
1124 select CRYPTO_ALGAPI
1125 select CRYPTO_CRYPTD
1126 select CRYPTO_ABLK_HELPER
1127 select CRYPTO_GLUE_HELPER_X86
1128 select CRYPTO_SERPENT
1132 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1134 Keys are allowed to be from 0 to 256 bits in length, in steps
1137 This module provides Serpent cipher algorithm that processes eigth
1138 blocks parallel using SSE2 instruction set.
1141 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1143 config CRYPTO_SERPENT_SSE2_586
1144 tristate "Serpent cipher algorithm (i586/SSE2)"
1145 depends on X86 && !64BIT
1146 select CRYPTO_ALGAPI
1147 select CRYPTO_CRYPTD
1148 select CRYPTO_ABLK_HELPER
1149 select CRYPTO_GLUE_HELPER_X86
1150 select CRYPTO_SERPENT
1154 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1156 Keys are allowed to be from 0 to 256 bits in length, in steps
1159 This module provides Serpent cipher algorithm that processes four
1160 blocks parallel using SSE2 instruction set.
1163 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1165 config CRYPTO_SERPENT_AVX_X86_64
1166 tristate "Serpent cipher algorithm (x86_64/AVX)"
1167 depends on X86 && 64BIT
1168 select CRYPTO_ALGAPI
1169 select CRYPTO_CRYPTD
1170 select CRYPTO_ABLK_HELPER
1171 select CRYPTO_GLUE_HELPER_X86
1172 select CRYPTO_SERPENT
1176 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1178 Keys are allowed to be from 0 to 256 bits in length, in steps
1181 This module provides the Serpent cipher algorithm that processes
1182 eight blocks parallel using the AVX instruction set.
1185 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1187 config CRYPTO_SERPENT_AVX2_X86_64
1188 tristate "Serpent cipher algorithm (x86_64/AVX2)"
1189 depends on X86 && 64BIT
1190 select CRYPTO_ALGAPI
1191 select CRYPTO_CRYPTD
1192 select CRYPTO_ABLK_HELPER
1193 select CRYPTO_GLUE_HELPER_X86
1194 select CRYPTO_SERPENT
1195 select CRYPTO_SERPENT_AVX_X86_64
1199 Serpent cipher algorithm, by Anderson, Biham & Knudsen.
1201 Keys are allowed to be from 0 to 256 bits in length, in steps
1204 This module provides Serpent cipher algorithm that processes 16
1205 blocks parallel using AVX2 instruction set.
1208 <http://www.cl.cam.ac.uk/~rja14/serpent.html>
1211 tristate "TEA, XTEA and XETA cipher algorithms"
1212 select CRYPTO_ALGAPI
1214 TEA cipher algorithm.
1216 Tiny Encryption Algorithm is a simple cipher that uses
1217 many rounds for security. It is very fast and uses
1220 Xtendend Tiny Encryption Algorithm is a modification to
1221 the TEA algorithm to address a potential key weakness
1222 in the TEA algorithm.
1224 Xtendend Encryption Tiny Algorithm is a mis-implementation
1225 of the XTEA algorithm for compatibility purposes.
1227 config CRYPTO_TWOFISH
1228 tristate "Twofish cipher algorithm"
1229 select CRYPTO_ALGAPI
1230 select CRYPTO_TWOFISH_COMMON
1232 Twofish cipher algorithm.
1234 Twofish was submitted as an AES (Advanced Encryption Standard)
1235 candidate cipher by researchers at CounterPane Systems. It is a
1236 16 round block cipher supporting key sizes of 128, 192, and 256
1240 <http://www.schneier.com/twofish.html>
1242 config CRYPTO_TWOFISH_COMMON
1245 Common parts of the Twofish cipher algorithm shared by the
1246 generic c and the assembler implementations.
1248 config CRYPTO_TWOFISH_586
1249 tristate "Twofish cipher algorithms (i586)"
1250 depends on (X86 || UML_X86) && !64BIT
1251 select CRYPTO_ALGAPI
1252 select CRYPTO_TWOFISH_COMMON
1254 Twofish cipher algorithm.
1256 Twofish was submitted as an AES (Advanced Encryption Standard)
1257 candidate cipher by researchers at CounterPane Systems. It is a
1258 16 round block cipher supporting key sizes of 128, 192, and 256
1262 <http://www.schneier.com/twofish.html>
1264 config CRYPTO_TWOFISH_X86_64
1265 tristate "Twofish cipher algorithm (x86_64)"
1266 depends on (X86 || UML_X86) && 64BIT
1267 select CRYPTO_ALGAPI
1268 select CRYPTO_TWOFISH_COMMON
1270 Twofish cipher algorithm (x86_64).
1272 Twofish was submitted as an AES (Advanced Encryption Standard)
1273 candidate cipher by researchers at CounterPane Systems. It is a
1274 16 round block cipher supporting key sizes of 128, 192, and 256
1278 <http://www.schneier.com/twofish.html>
1280 config CRYPTO_TWOFISH_X86_64_3WAY
1281 tristate "Twofish cipher algorithm (x86_64, 3-way parallel)"
1282 depends on X86 && 64BIT
1283 select CRYPTO_ALGAPI
1284 select CRYPTO_TWOFISH_COMMON
1285 select CRYPTO_TWOFISH_X86_64
1286 select CRYPTO_GLUE_HELPER_X86
1290 Twofish cipher algorithm (x86_64, 3-way parallel).
1292 Twofish was submitted as an AES (Advanced Encryption Standard)
1293 candidate cipher by researchers at CounterPane Systems. It is a
1294 16 round block cipher supporting key sizes of 128, 192, and 256
1297 This module provides Twofish cipher algorithm that processes three
1298 blocks parallel, utilizing resources of out-of-order CPUs better.
1301 <http://www.schneier.com/twofish.html>
1303 config CRYPTO_TWOFISH_AVX_X86_64
1304 tristate "Twofish cipher algorithm (x86_64/AVX)"
1305 depends on X86 && 64BIT
1306 select CRYPTO_ALGAPI
1307 select CRYPTO_CRYPTD
1308 select CRYPTO_ABLK_HELPER
1309 select CRYPTO_GLUE_HELPER_X86
1310 select CRYPTO_TWOFISH_COMMON
1311 select CRYPTO_TWOFISH_X86_64
1312 select CRYPTO_TWOFISH_X86_64_3WAY
1316 Twofish cipher algorithm (x86_64/AVX).
1318 Twofish was submitted as an AES (Advanced Encryption Standard)
1319 candidate cipher by researchers at CounterPane Systems. It is a
1320 16 round block cipher supporting key sizes of 128, 192, and 256
1323 This module provides the Twofish cipher algorithm that processes
1324 eight blocks parallel using the AVX Instruction Set.
1327 <http://www.schneier.com/twofish.html>
1329 comment "Compression"
1331 config CRYPTO_DEFLATE
1332 tristate "Deflate compression algorithm"
1333 select CRYPTO_ALGAPI
1337 This is the Deflate algorithm (RFC1951), specified for use in
1338 IPSec with the IPCOMP protocol (RFC3173, RFC2394).
1340 You will most probably want this if using IPSec.
1343 tristate "Zlib compression algorithm"
1349 This is the zlib algorithm.
1352 tristate "LZO compression algorithm"
1353 select CRYPTO_ALGAPI
1355 select LZO_DECOMPRESS
1357 This is the LZO algorithm.
1360 tristate "842 compression algorithm"
1361 depends on CRYPTO_DEV_NX_COMPRESS
1362 # 842 uses lzo if the hardware becomes unavailable
1364 select LZO_DECOMPRESS
1366 This is the 842 algorithm.
1369 tristate "LZ4 compression algorithm"
1370 select CRYPTO_ALGAPI
1372 select LZ4_DECOMPRESS
1374 This is the LZ4 algorithm.
1377 tristate "LZ4HC compression algorithm"
1378 select CRYPTO_ALGAPI
1379 select LZ4HC_COMPRESS
1380 select LZ4_DECOMPRESS
1382 This is the LZ4 high compression mode algorithm.
1384 comment "Random Number Generation"
1386 config CRYPTO_ANSI_CPRNG
1387 tristate "Pseudo Random Number Generation for Cryptographic modules"
1392 This option enables the generic pseudo random number generator
1393 for cryptographic modules. Uses the Algorithm specified in
1394 ANSI X9.31 A.2.4. Note that this option must be enabled if
1395 CRYPTO_FIPS is selected
1397 menuconfig CRYPTO_DRBG_MENU
1398 tristate "NIST SP800-90A DRBG"
1400 NIST SP800-90A compliant DRBG. In the following submenu, one or
1401 more of the DRBG types must be selected.
1405 config CRYPTO_DRBG_HMAC
1406 bool "Enable HMAC DRBG"
1410 Enable the HMAC DRBG variant as defined in NIST SP800-90A.
1412 config CRYPTO_DRBG_HASH
1413 bool "Enable Hash DRBG"
1416 Enable the Hash DRBG variant as defined in NIST SP800-90A.
1418 config CRYPTO_DRBG_CTR
1419 bool "Enable CTR DRBG"
1422 Enable the CTR DRBG variant as defined in NIST SP800-90A.
1426 default CRYPTO_DRBG_MENU if (CRYPTO_DRBG_HMAC || CRYPTO_DRBG_HASH || CRYPTO_DRBG_CTR)
1429 endif # if CRYPTO_DRBG_MENU
1431 config CRYPTO_USER_API
1434 config CRYPTO_USER_API_HASH
1435 tristate "User-space interface for hash algorithms"
1438 select CRYPTO_USER_API
1440 This option enables the user-spaces interface for hash
1443 config CRYPTO_USER_API_SKCIPHER
1444 tristate "User-space interface for symmetric key cipher algorithms"
1446 select CRYPTO_BLKCIPHER
1447 select CRYPTO_USER_API
1449 This option enables the user-spaces interface for symmetric
1450 key cipher algorithms.
1452 config CRYPTO_HASH_INFO
1455 source "drivers/crypto/Kconfig"
1456 source crypto/asymmetric_keys/Kconfig